Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F-ESx0vQZPmEig7rOyzNRmX3IWc.roa
File: F-ESx0vQZPmEig7rOyzNRmX3IWc.roa (raw, json)
Hash identifier: zUlgGVGkMm71ZQr4FEZBkYzlzMIW/ACtvtVO44SP6KA=
Subject key identifier: 17:E1:12:C7:4B:D0:64:F9:84:8A:0E:EB:3B:2C:CD:46:65:F7:21:67
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0D112FC84DA0DC2C17227FAA51A7C948
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F-ESx0vQZPmEig7rOyzNRmX3IWc.roa
Signing time: Sat 19 Aug 2023 09:12:24 +0000
ROA not before: Sat 19 Aug 2023 09:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0d:11:2f:c8:4d:a0:dc:2c:17:22:7f:aa:51:a7:c9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 09:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17e112c74bd064f9848a0eeb3b2ccd4665f72167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:1f:b1:52:e8:ad:07:4f:70:33:35:9e:ce:
ae:43:df:75:54:13:88:fb:61:f7:e0:11:9c:5b:e2:
f9:bb:83:ff:db:c9:68:35:ed:5c:14:c9:42:5b:f5:
f7:c6:c8:5c:27:60:5a:1c:e0:a8:e0:14:d6:be:a3:
bf:5c:d5:19:c7:84:5d:9a:10:e4:1f:9f:73:2a:69:
b5:97:8d:e8:60:7c:29:7d:de:da:cd:0e:d2:8c:54:
00:11:c2:22:08:0b:e7:5c:64:90:bf:7a:51:fa:1a:
94:64:33:cd:6a:9b:47:38:59:38:16:95:19:a6:e4:
e8:73:5f:e0:04:ef:77:64:a4:69:ad:5b:f9:8e:e3:
40:3d:1f:90:14:12:0a:39:21:5e:5e:1d:44:1b:1a:
d9:07:43:7d:68:c6:f7:e4:58:40:55:69:1c:ee:2b:
13:88:6b:d5:0d:bd:8b:e7:a6:21:6d:5d:72:7b:28:
88:75:4b:62:d4:89:a8:69:97:4c:e6:98:07:34:54:
f3:17:4c:7a:20:b1:ce:9e:8d:06:28:1d:45:14:38:
5a:8c:8c:df:5f:41:aa:1f:33:fe:48:e5:e8:49:66:
c0:1e:7e:0a:73:ad:b9:27:28:b7:f7:d3:97:a8:2d:
95:4e:8f:c8:f8:ce:e1:9f:06:1b:7f:3a:53:b3:28:
e6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E1:12:C7:4B:D0:64:F9:84:8A:0E:EB:3B:2C:CD:46:65:F7:21:67
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F-ESx0vQZPmEig7rOyzNRmX3IWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:38:ed:2c:85:c2:db:c0:9d:88:6e:9c:3f:25:07:45:a2:3b:
21:da:99:fc:61:6f:13:0c:f4:51:1f:f0:da:69:fb:30:d9:97:
a1:9e:e2:2b:6c:ac:cb:b4:9b:c8:b0:30:36:74:1d:d5:21:65:
cb:f8:17:ed:3c:cf:be:28:3e:aa:f3:75:7b:7c:95:6d:87:80:
95:e9:f6:19:f9:00:42:18:f1:85:f1:8a:9d:fa:50:80:8c:ff:
9e:26:1e:97:28:b4:f8:4c:c6:37:83:cb:72:d1:42:b3:6a:ac:
66:2a:41:46:99:1f:e3:77:c3:5b:69:8d:20:bc:38:e0:db:34:
5c:e5:a3:2d:7c:10:73:bf:f3:6e:b4:78:8c:7d:e7:d1:2e:9e:
89:26:62:fe:f3:fe:37:c8:b5:8d:16:88:1d:24:0a:b4:09:2b:
61:1b:c9:73:21:07:c2:87:18:8d:aa:16:be:12:4e:89:b1:30:
65:2e:cf:58:f1:1e:75:9b:36:d8:3c:52:d4:a8:8c:81:aa:80:
14:bf:5c:50:d2:03:37:a9:f8:de:cd:8a:40:9e:1a:f2:4f:2c:
5b:36:aa:2b:98:a1:d3:8c:fd:4d:cc:98:39:9f:1c:8b:c2:ac:
a2:cf:e8:80:b2:f3:e9:fa:b9:c7:e8:68:cf:9e:8c:1b:be:b8:
66:13:ab:f3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoNES/ITaDcLBcif6pRp8lIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODE5MDkxMjI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2UxMTJjNzRiZDA2NGY5ODQ4YTBlZWIzYjJjY2Q0NjY1ZjcyMTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjsfsVLorQdPcDM1ns6uQ991VBOI
+2H34BGcW+L5u4P/28loNe1cFMlCW/X3xshcJ2BaHOCo4BTWvqO/XNUZx4RdmhDk
H59zKmm1l43oYHwpfd7azQ7SjFQAEcIiCAvnXGSQv3pR+hqUZDPNaptHOFk4FpUZ
puToc1/gBO93ZKRprVv5juNAPR+QFBIKOSFeXh1EGxrZB0N9aMb35FhAVWkc7isT
iGvVDb2L56YhbV1yeyiIdUti1ImoaZdM5pgHNFTzF0x6ILHOno0GKB1FFDhajIzf
X0GqHzP+SOXoSWbAHn4Kc625Jyi399OXqC2VTo/I+M7hnwYbfzpTsyjmwwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBfhEsdL0GT5hIoO6zsszUZl9yFnMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRi1FU3gwdlFaUG1FaWc3ck95ek5SbVgzSVdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAD447SyFwtvAnYhunD8l
B0WiOyHamfxhbxMM9FEf8Npp+zDZl6Ge4itsrMu0m8iwMDZ0HdUhZcv4F+08z74o
PqrzdXt8lW2HgJXp9hn5AEIY8YXxip36UICM/54mHpcotPhMxjeDy3LRQrNqrGYq
QUaZH+N3w1tpjSC8OODbNFzloy18EHO/8260eIx959EunokmYv7z/jfItY0WiB0k
CrQJK2EbyXMhB8KHGI2qFr4STomxMGUuz1jxHnWbNtg8UtSojIGqgBS/XFDSAzep
+N7NikCeGvJPLFs2qiuYodOM/U3MmDmfHIvCrKLP6ICy8+n6ucfoaM+ejBu+uGYT
q/M=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:25:11 2025 by rpki-client